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Abstract 

In this paper the number of F^-isomorphism classes of general Ja- 
cobi quartic curves, i.e., the number of general Jacobi quartic curves 
with distinct j-invariants, over the finite field ¥ q is enumerated. 
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1 Introduction 

Elliptic curve cryptosystems were proposed by Miller (1986) and by Koblitz 
(1987) which relies on the difficulty of the elliptic curve discrete logarithm 
problem. No sub-exponential algorithms have been found for solving the 
discrete logarithm problem based on elliptic curves is one of main advantage 
of this system. One basic operation required to implement the system is the 
point multiplication, that is, the computation of kP for an integer k and a 
point P on the curve. To obtain faster operations, much effort have been 
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done in representing the elliptic curves in special forms which provide faster 
addition, doubling and tripling in the last decades. 

The Jacobi quartic curve is one of the most important curves in cryp- 
tography. Recent works have shown that arithmetics on the Jacobi quartic 
elliptic curves can be performed more efficiently The reader is referred to |T] 
for the comparison analysis of computational costs for all kinds of curves. A 
Jacobi quartic elliptic curve over a field K is defined by y 2 = x 4 + ax 2 + 1, 
where a E K with a 2 ^ 4. Such curves were first proposed by Chudnovsky 
and Chudnovsky [3] in 1986. After that, Billet and Joye [2], Duquesne [I], 
and Hisil, etc. [5] gave more improvements for the arithmetics on Jacobi 
quartic curves. 

In order to study the elliptic curve cryptosystem, one need first to an- 
swer how many curves there are up to isomorphism, because two isomorphic 
elliptic curves are the same in the point of cryptographic view. In this pa- 
per the number of Fg-isomorphism classes of Jacobi quartic curves, i.e., the 
number of Jacobi quartic curves with distinct j-invariants, over a finite field 
is enumerated. 

Throughout the paper, W q denotes the finite field with q elements and ¥ q 
is the algebraic closure of ¥ q . 

2 Background 

A curve means a projective variety of dimension 1. There are several ways 
to define elliptic curves. In this paper, an irreducible curve is said to be an 
elliptic curve if it is birational equivalent to a plane non-singular cubic curve. 

It is well-known that every elliptic curve E over a field K can be written 
as a Weierstrass equation 

E : Y 2 + a x XY + a 3 Y = X 3 + a 2 X 2 + a A X + a 6 

with coefficients a 1; a 2 , 03, a 4 , ciq G K. The discriminant A(i^) and the j- 
invariant j(E) of E are defined as 

A(E) = -b% - 8b 3 4 - 276j? + 9b 2 b A b 6 

and 

j(E) = (b 2 2 -24h) 3 /A(E), 
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where 

b 2 = a\ + Aa 2 , 

64 = 2(3,4 + 0-1^3, 

h = o-i + 4a 6 , 

b$ = a 2 a 6 — CLia^a^ + Aa 2 a^ + a 2 a 2 — a\. 

Two projective varieties V\ and V 2 are isomorphic if there exist morphisms 
<fi : V\ — > V 2 and (p : V 2 — > V\, such that <fo<j) and 4>°<p are the identity maps on 
V\ and V 2 respectively. The morphisms <fi and (p are called the isomorphisms 
from Vi to V 2 and from V 2 to V\ respectively Two elliptic curves are said to 
be isomorphic if they are isomorphic as projective varieties. Let 

E x : Y 2 + a x XY + a 3 Y = X 3 + a 2 X 2 + a 4 X + a 6 

and 

E 2 : Y 2 + OjIY + agF = X 3 + a^ 2 + + % 

be two elliptic curves defined over K. It is known [6| that i?i and E 2 are 
isomorphic over X, or E\ is X-isomorphic to E 2 , if and only if j(Ei) = j(E 2 ), 
where X is the algebraic closure of X. However (see j6]), E\ and E 2 are 
isomorphic over X if and only if there exist u,r,s,t G X and a^O such that 
the change of variables 

(X, Y) ->• (w 2 X + r, m 3 F + u 2 sX + t) 

maps the equation of E\ to the equation of E 2 . Therefore, E\ and E 2 are 
isomorphic over X if and only if there exists u,r,s,t G X and m ^ such 
that 

ua 1 = ai + 2s, 
u 2 a 2 = a 2 — scii + 3r — s 2 , 
< u 3 a 3 = a 3 + rai + 2t, 

u 4 a 4 = a 4 — sa 3 + 2ra 2 — (t + rs)ai + 3r 2 — 2st, 
M 6 a 6 = a-6 + ra 4 + r 2 a 2 + r 3 — ta 3 — t 2 — rtai. 

For the simplified Weierstrass equations where a\ = a 3 = a l = a' 3 = 0, then 
E\ is X-isomorphic to E 2 if and only if there exist u, r G X and u^O such 
that 

u 2 a 2 = a 2 + 3r, 

ti 4 a 4 = 04 + 2ra-2 + 3r 2 , (1) 
M 6 a 6 = a6 + ra 4 + r 2 a 2 + r 3 . 
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The reader is referred to [5] for more results on the isomorphism of elliptic 
curves. 

In order to enumerate the number of elliptic curves with distinct j- 
invariants, one need to study the value distribution of the j-invariant as 
a function of curve parameters. However it is effective for only low degree 
j-invariant functions, but very difficult for counting the value set of the j- 
invariant function of a Jacobi quartic curve where a polynomial of degree 6 
is involved, especially for the general Jacobi quartic curve where polynomials 
with 2 variables are associated. In this paper, this number is enumerated by 
studying the F g -isomorphism classes of those curves. 

3 Enumeration for Jacobi quartics curves 

Let E a : y 2 = x A + ax 2 + 1 (a 2 ^ 4) be a Jacobi quartic curve defined over a 
field K of characteristic > 3. It is clear that the j-invariant of E a is ^fejjjr ■ 

Lemma 3.1. Let K be a field of characteristic > 3, and let a G K with 
a 2 7^ 4. Then the curve 

E a : y 2 = x 4 + ax 2 + 1 
is birational equivalent to the elliptic curve 




via the change of variables ip(x,y) = (u,v), where 



u = 



x 2 - y + 1 
2 



and v 



x{2x 2 -2y + a) 
A 



The inverse change is ip(u,v) = (x,y), where 



x = 



Au + a - 2 



and 




Proof. In order to prove 
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it is sufficient to prove 64t> 2 = 4w(4w — 4) (4m — (2 — a)). Since 4u — (2 — a) = 
2x 2 — 2y + a and 64v 2 = 4x 2 (2x 2 — 2y + a) 2 , it is sufficient to show that 
4x 2 (2x 2 — 2y + a) = Au(Au — 4). The result then follows immediately from 

4x 2 (2x 2 - 2y + a) = 8x 4 - 8x 2 y + 4ax 2 , 

and 

4m(4u-4) = 4(x 2 - y + l)(x 2 - y - 1) 
= 4(x 4 + y 2 - 2x 2 y - 1) 
= 4(x 4 + x 4 + ax 2 + 1 - 2a; 2 ?/ - 1) 
= 8x 4 — 8x 2 y + 4ax 2 

On the other hand, from 16v 2 = 4u(u — l)(4w + a — 2), x = 4u + v a _ 2 , an d 

y = ( 4m 4 ^_ 2 ) 2 — 2m + 1, we have y 2 = x 4 + ax 2 + 1 by a direct computation. 
Obviously, the maps if and ip are mutually inverse to each other. □ 

Lemma 3.2. Let E a : y 2 = x 4 + ax 2 + 1 (a 2 ^ A) and E b : y 2 = x 4 + 5x 2 + 1 
(b 2 4) be two Jacobi quartics curves defined over a field K of characteristic 
> 3. Then j(E a ) = j(E b ) if and only if 2=5 G {2^, -i-, 2±2, gs, *±§}. 

Proof. The curve i? a : y 2 = x 4 + ax 2 + 1 is birational equivalent to the 
curve W a : y 2 = x(x — l)(x — 2 ^ L ) by Lemma I3~T1 Therefore j(E a ) = j(W a ). 
Furthermore, it is well known that for two Legendre curves L\ : y 2 = x(x — 
l)(x — A) and : y 2 = x(x — l)(x — u), they have the same j-invariant if 
and only if u G {A, j-, 1 — A, j^r, j^t, ^r^}- Thus the lemma follows. □ 

Theorem 3.3. Let N a be the number of ¥ q -isomorphism classes of Jacobi 
quartic curves defined over the finite field W q . Then we have 

if q = l,7 (mod 12), 

if q= 5,11 (mod 12). 

Proof. From Lemma I3.2[ we know that for the elliptic curve L\ : y 2 = 
x(x — l)(x — A) (A 7^ 0, 1), the map A j(L x ) is exactly six-to-one unless 
when A E {—1, 2, |}, the map is three-to-one, or when A 2 — A + 1 = 0, the 
map is two-to-one. Note that A 2 — A + 1 = has a root in ¥ q if and only 



q + 5 
6 ' 
q + 1 
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if F* has an element of order 
Therefore, we have 

( g-2-3-2 



3, which is equivalent to q = 1 or 7 (mod 12). 



+ 1 + 1 



g + 5 



if q 



1,7 (mod 12), 




q+1 



6 



6 



if q 



5,11 (mod 12). 



□ 



4 Enumeration for general Jacobi quartics curves 

In this section, consider the general Jacobi quartics curve E a ^ : y 2 = x 4 + 
ax 2 + 6 with (a 2 — 46)6 7^ defined over ¥ q of characteristic > 3. A Jacobi 
quartics curve is a special one of E a ^ with 6 = 1. The j-invariant of E a ^ 
is j(E a> b) = 1 w° 2 ^4fc)2 ■ Note that = bx A + ax 2 + 1 can be changed to 
y 2 = x 4 + ax 2 + 6 by x 1— > 1/x. So we consider only the form y 2 = x 4 + ax 2 + 6 
for convenience. 

The following lemma can be proved by a direct computation similar as in 
Lemma 13.11 

Lemma 4.1. Let K be a field of characteristic > 3, and let a, 6 G K with 
(a 2 — 46)6 7^ 0. Then the curve 

E a ,b ■ y 2 = x 4 + ax 2 + 6 

is birational equivalent to the elliptic curve 

W atb : v 2 = u{u 2 - 2au + a 2 - 46) 

via the change of variables 

u = 2x 2 - 2y + a, v = 2x(2x 2 -2y + a). 

The inverse change is 



For the elliptic curve E at b, we know that j(E a ^) = ^" 2 _ 4 ^ 2 . Therefore 
j(E at b) = if and only if a 2 + 126 = 0. Moreover, we have the following 
proposition. 
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Proposition 4.2. Let E a ^ : y 2 = x A + ax 2 + 6 be a general Jacobi quartics 
curve defined over the finite field ¥ q of characteristic > 3, where (a 2 —46)6 ^ 
0. Then j(E a ^) = 1728 if and only if a(a 2 — 366) = ; that is, a = or 
a 2 = 366. 

Proof. By Lemma H~Tl E a ^ is birational equivalent to the curve W a ,b '■ y 2 = 
x 3 — lax 2 + (a 2 — 46) x, and W a>b is isomorphic to S a ^ : y 2 = x 3 + (—4a — 
+ — It is clear that the j-invariant of S a ,b is equal to 1728 if 
and only if ^ - = 0, that is a(a 2 - 366) = 0. Thus j{E a>b ) = 1728 if and 
only if a{a 2 - 366) = 0. □ 

Corollary 4.3. Let {a 2 — 46)6 ^ and let N be the number of curves of the 
form E a b with j(E a b ) 7^0, 1728. Then 



N 



(g-l)(g-7) 
2 

(g-l)(g-5) 




2 

(?-!)(? -3) 



»/ g = 1,7 (mod 12), 
z/ g = 5,11 (mod 12), 

z/ g = 1,7 (mod 12), 
if g = 5, 11 (mod 12), 



when 6 is not a square. 



Proof. Assume first that 6 is a square in ¥ q . Then a 2 — 46 = has two roots. 
Hence the number of curves of the form E a ^ over ¥ q is (g — 2) • (g — l)/2 = 
(g -!)(?- 2)/2. If i(-B 0)6 ) = 0, then a 2 + 126 = has two roots in ¥ q if 
g = 1,7 (mod 12), but has no root if g = 5,11 (mod 12). Therefore the 
number of curves of the form E ajb over ¥ q with j{E a ^) = is 2 • 2=- = g — 1 
if g = 1,7 (mod 12), and is if g = 5,11 (mod 12). If j'^fe) = 1728, 
then a = or a 2 = 366. Thus the number of curves of the form E a ^ with 
j(E a>b ) = 1728 is S=i + 2 • 2=1 = fcli. By subtraction, we get that 



N 



(JzD^l _ (g _ i) _ 3fci) = kziK£zZl ; if g =l,7 ( m od 12), 
(£zl|£z?l _ - = isziKsza , if g = 5, 11 (mod 12) 
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The number N can be computed similarly when 6 is not a square. In this 
case the number of curves E a ^ b is q • (q — l)/2 = q(q — l)/2 and a 2 + 126 = 
has two roots in ¥ q if q = 5, 11 (mod 12), has no root if g = 1, 7 (mod 12). □ 

Now consider curves i? ai 6 over ¥ q with j(E a)b ) ^ 0, 1728. Suppose that 
two elliptic curves E a>b and -E m>n are isomorphic over ¥ q . Then j(E a ,b) = 
j(E m}n ), and then j(W a) b) = j(W m)n ) by Lemma I4~T1 which is equivalent to 
W a ,b an d W mjH are isomorphic over ¥ q . Moreover, by ((H), the last statement 
holds if and only if there exist u,r G ¥ q with n ^ such that 

2mu 2 = 2a — 3r, 

(m 2 -4n)w 4 = 3r 2 -4ar + (a 2 -46), (2) 
r(r 2 - 2ar + a 2 - 46) = 0. 

Proposition 4.4. Let (a 2 — 46)6 7^ and let b be a square element. Then 
for every general Jacobi quartic curve E ajb : y 2 = x 4 + ax 2 + b, there is a 
Jacobi quartic curve E m : y 2 = x 4 + mx 2 + 1 which is ¥ q -isomorphic to it. 

Proof. Assume that 6 = al 2 for some d G F* Let m = a<i -1 , u = d and 
r = 0. Then E a _ b and i? m are isomorphic over ¥ q by (J2J). □ 

Proposition 4.5. Let : y 2 = x 4 + ax 2 + b be a general Jacobi quartics 
curve defined over the finite field ¥ q of characteristic > 3, where 6(a 2 — 46) 7^ 
0. Assume that j(E a b ) 7^ 1728, then E a<b and the curve E m ^ bm 2j a 2 : y 2 = 
x 4 + mx 2 + (bm 2 /a 2 ) are isomorphic over ¥ q for any m G F*. 

Proof. Since j{E a)b ) 7^ 1728, we have a^O. From (p]), for any m G F*, let 
m = G F* and r = 0, we get that E a j> and E mjbm 2/ a 2 are isomorphic over 
F ff . "' □ 

For the elliptic curves E a>b with j(E a b ) 7^ 0, 1728, assume that the curve 
E a ^ n is Fg-isomorphic to E a ^ b , then there exist u, r G ¥ q with such that 

2aw 2 = 2a- 3r, 

(a 2 -4n)w 4 = 3r 2 -4ar + (a 2 -46), (3) 
r(r 2 - 2ar + a 2 - 46) = 0. 

just by replacing m to a in ([2]). Thus r = or r 2 — 2ar + a 2 — 46 = 0. When 
r = 0, we have immediately that n = b. In the following, assume that r 7^ 0. 
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So we have r = a + 2\/b or r = a — 2y/b, Therefore 

a 2 3r 2 - 4ar + (a 2 - 46) a 2 (a - 2^)2 

n = = — 1 (4) 

4 4m 4 4(a + 6v^) 2 

or 

a 2 (a + 2V&) 2 

n = F — . (5) 

4(0-6^)2 

by substituting w 2 = 2a 2 ^ 3r and r = a + 2a/6 or r = a — 2\/o in the second 
equation of 

Assume first that 6 is not a square in ¥ q . We claim that neither ^t~^^ 
nor ^7~^/p is an element of F g which is contradictory tonG F ? . In fact, if 

a 2 (a — 2\/b) 2 a 2 ,, r-.. /-.. ^ 

4(o + QVb) 2 4(a 2 - 366) 2 

then 

((a - 2V6)(a - Gv^)) 2 = (a 2 - 80^+ 126) 2 G ¥ q . 
Therefore, we must have 16a 3 + 192a6 = 16a(a 2 + 126) = 0. Contradicts to 
the assumptions that j{E a ^) ^ 0, 1728. Similarly, if ^z^p e one 
can get a contradiction again. This proves that if h is not a square in F 9 , 
and E ajU is F g -isomorphic to E a ^, then we must have n = b. Therefore, by 
Proposition I4.5[ when b is not a square element, the number of elliptic curves 
of the form E a ^ with j(E a ^) ^ 0, 1728 in each of its F g -isomorphism class 
is q — 1. Thus when b is not a square, the number of F 9 -isomorphism classes 
of curves of the form E a h with j(E a>b ) ^ 0, 1728 is 



q 



2 ' 
g-3 



if q = 1,7 (mod 12), 

(6) 

if g = 5, 11 (mod 12), 



by Corollary 14.31 

On the other hand, assume that b = d 2 is a square in F g . We claim that 

neitller f^f 4(a-6^» 2 18 6qUal t0 6 ' 111 faCt ' if 

g2(g - 2Vb) 2 _ 
A(a + 6y/b) 2 ~ ' 
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then 

a 2 (a-2d) 2 = 4d 2 (a + Qd) 2 . 

Thus 

a(a — 2d) = 2d(a + 6d) or a(2d — a) = 2d(a + 6d). 

So 

(o + 2d)(o-6d) = or a 2 + 12d 2 = 0, 
that is a 2 — 46 = or a 2 = 366 or a 2 + 126 = 0, which is contradictory to 
the assumptions that j(E a>b ) ^ 0, 1728. Similarly, if a 4( ^ + 6 2 J^l = b, then 
one can get a contradiction again. Furthermore, we can check easily that 
a , fc-^r?^ 7^ " ( - a+2 ^„ . This proves n has 3 choices in this case. Therefore, 
when 6 is a square element, the number of elliptic curves of the form E a ^ 
with j(Ea t b) 7^ 0, 1728 in each of its F g -isomorphism class is 3(q — 1) by 
Proposition 14.51 and then the number of F^-isomorphism classes of curves of 
the form E a)b with j{E a>b ) ^ 0, 1728 is 

q-7 



6 ' 
q — 5 



if q = l,7 (mod 12), 

(7) 

if q = 5,11 (mod 12), 



when 6 is a square, by Corollary 14.31 

Adding together the numbers in ([6]), ([7]) above and 2 which correspond- 
ing the two special classes of curves with j(E a>b ) = and j(E ab ) = 1728, 
respectively, we have the following theorem. 

Theorem 4.6. Let N ajb be the number of ¥ q -isomorphism classes of general 
Jacobi quartic curves E a ^ b : y 2 = x A + ax 2 + 6 with (a 2 — 46)6 7^ defined 
over the finite field ¥ q . Then we have 



N a , 



4g + 2 

6 : 
4g-2 
6 '' 



if ? = 1,7 (mod 12), 
if q = 5,11 (mod 12). 



Remark 4.7. We know from Proposition 4-4 that the number N a of F, 



isomorphism classes of Jacobi quartic curves E a is equal to the number of 
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W q -isomorphism classes of general Jacobi quartic curves E a ^ with square b. 
Thus one have 

N c 

when <7 = 1,7 (mod 12) but 

N c 

when q = 5, 11 (mod 12) from the numbers in (|7|) and from a 2 + 12b = 
has no root, i.e., j(E a) b) ^ 0, when b is a square and q = 5,11 (mod 12). 
Therefore we get the result in Theorem \3.3\ again. 
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Q ~ 7 2 = g + 5 

6 6 

Q ~ 5 , = Q+ 1 
6 6 
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